Security
Added
- Added
CiliumNetworkPolicy for the CRD install job.
Changed
- Note: Due to breaking changes in the official chart, it is not possible to cleanly replace an existing Falco DaemonSet from a previous version with this new version. As a result, when updating to this version, there will be a short Falco downtime while the existing DaemonSet is deleted and replaced.
- Update
falco to upstream version 0.33.0 / chart version 2.2.0. - Update
falco-exporter to upstream version 0.8.0 / chart version 0.9.1. - Update
falcosidekick to upstream version 2.26.0 / chart version 0.5.9.
Changed
- Rename Chart name from
trivy-app to trivy.
Fixed
- Fix broken links in documentation.
- Don’t remove the
crd-install job when the job fails, so that we can investigate.
- Extend readonly ClusterRole to include pods/log so customers can debug failures on the management clusters.
Added
- Add CI job to push to
openstack-app-collection. - Add CI job to push to
gcp-app-collection. - Configured read header timeout in the http server
Fixed
- Dependency updates for security.
Changed
- Fix schema type for tolerations (#157).
Changed
- Make ServiceMonitor relabelings configurable and drop unhelpful pod, container, and service labels by default.
- Build with
app-build-suite. - Add
app-test-suite basic smoke tests.
Changed
- Push
kyverno to the cloud-director app collection. - Update
kyverno-policy-reporter to upstream version 2.10.1 / chart version 2.13.1.